The Moss Key and the Moving Letters

Case 41 · cipher · Medium · About 10–15 minutes

A conservatory messenger uses a repeating keyword to change the alphabet shift from letter to letter. The keyword has been left in plain sight. The message is secure only against a visitor who skips the operating instructions.

Recover the instruction exactly. No plant identification, historical cipher knowledge, or interpretation of the illustration is required.

AI-generated atmospheric illustration. It contains no puzzle evidence; use the complete written clues.

Write the alphabet ABCDEFGHIJKLMNOPQRSTUVWXYZ with values A=0 through Z=25.

For encryption, write the keyword MOSS repeatedly underneath the letters of a spaceless message. Add each message-letter value to the key-letter value beneath it. If the total is 26 or more, subtract 26. Convert the result back to a letter.

For example, A encrypted with key B becomes B, because 0+1=1. Z with key C becomes B, because 25+2=27, and 27−26=1.

The complete encrypted message is:

RCDDAKJWPHZJQOV

The key begins at M beneath the first ciphertext letter and continues M–O–S–S–M–O–S–S without resetting. The plaintext has fifteen letters. After decrypting, put spaces at word lengths 6, 3, 6.

What instruction was sent? Every ciphertext character is correct. The example pairs are separate demonstrations and do not use up any part of the repeated keyword.

Hint 1 - reveal when you want a nudge

To undo addition, subtract the key value. When the result is negative, add 26 before converting back to a letter.

Hint 2 - reveal when you want a nudge

The first four key letters are MOSS, with values 12,14,18,18. R−M gives F, C−O wraps to O, and the next two letters each decode to L.

Reveal the solution and explanation

The instruction is FOLLOW RED THREAD.

Repeat the key as MOSSMOSSMOSSMOS. Subtracting its values from RCDDAKJWPHZJQOV, with alphabet wraparound, gives FOLLOWREDTHREAD. The specified lengths divide it into FOLLOW, RED, and THREAD.

The first letter is a direct subtraction: R has value 17 and M has value 12, leaving 5, which is F. The second crosses the alphabet boundary: C has value 2 and O has value 14;2−14=−12, and adding 26 gives 14, which is O. The key does not start over at RED. It remains aligned with the continuous fifteen-character string.

This is a fully keyed cipher. A solver is not expected to infer MOSS by frequency analysis or guess a password from a picture. Once the key alignment is fixed, each position is a reversible addition modulo 26 and has one possible plaintext letter.

A forward check adds the same key values to the recovered message. It recreates all fifteen printed ciphertext letters, including the wraparound positions. The spacing check is separate:6+3+6 accounts for every letter exactly once.

Solve another: The Cabinet of Fifty Mysteries · Browse all 50 cases

The Drawer With a Growing Alphabet Shift

Case 34 · cipher · Medium · About 7–10 minutes

A clockmaker dislikes a cipher wheel that stays still. Her encrypted note advances the alphabet setting after every letter, and the mechanism remembers how many letters have already passed.

The note identifies a drawer. Its full operating instructions survived, so the challenge is careful reversal rather than guessing a secret rule.

It contains no puzzle evidence; use the complete written clues.

Use the alphabet ABCDEFGHIJKLMNOPQRSTUVWXYZ, with wraparound after Z.

The clockmaker first removes all spaces from an instruction. She encrypts its first letter by shifting it forward one place, the second by two places, the third by three places, and so on. Letter number fourteen is shifted fourteen places. No position resets at a word boundary.

Her complete ciphertext is:

UCNIYNPZMNCMJSG

There are fifteen letters. Recover them, then restore the spaces using the supplied word lengths: 4, 5, 6.

A miniature example of the method is CAT → DCW: C moves one place to D, A moves two places to C, and T moves three places to W. This example is separate from the drawer instruction; do not count its letters when setting the shift.

What instruction did the clockmaker write? No extra substitution, reversed reading order, or interpretation of the picture is involved.

Hint 1 - reveal when you want a nudge

Number the ciphertext letters 1 through 15. Decryption moves backward by the corresponding number, not forward again.

Hint 2 - reveal when you want a nudge

The first four calculations are U−1=T, C−2=A, N−3=K, and I−4=E. Keep increasing the shift after this first word.

Reveal the solution and explanation

The instruction is TAKE THIRD DRAWER.

Subtracting the position from each encrypted letter yields TAKETHIRDDRAWER. The supplied lengths divide this into TAKE, THIRD, and DRAWER. The spaces are fixed by the instructions rather than supplied by an assumption about sensible English.

Here are useful checkpoints. Position 5 is Y; moving backward five places gives T, the beginning of THIRD. Position 9 is M; moving backward nine places gives D, its final letter. Position 10 is N; moving backward ten places gives D, the beginning of DRAWER. The final G moves backward fifteen places, wrapping around the alphabet, to R.

A common near-solution comes from restarting the count at the second word. That would use a shift of one at position 5, contradicting the rule that spaces were removed before encryption.

Each position has one specified shift, and shifting an alphabet is reversible. Consequently every ciphertext character has exactly one predecessor. As a separate check, encrypting all fifteen recovered characters with shifts 1–15 reproduces UCNIYNPZMNCMJSG character for character. There is no competing key to select by taste or context.

Solve another: The Cabinet of Fifty Mysteries · Browse all 50 cases

The Postmaster’s Backward Stamp

Case 32 · cipher · Medium · About 6–10 minutes

A postmaster uses two small operations to disguise short delivery instructions. He has written down his complete procedure, but left the wheel setting on yesterday’s test slip.

The sealed parcel must go to one destination. Recover the instruction without guessing what would be a sensible place to hide it.

It contains no puzzle evidence; use the complete written clues.

Here is the ordinary alphabet:

ABCDEFGHIJKLMNOPQRSTUVWXYZ

To encrypt, move every letter forward by the same number of alphabet positions, wrapping Z back to A. The setting is a whole number from 1 through 9. Then reverse the letters inside each word. Leave the word order and spaces unchanged.

The test slip records an original word and its final encrypted form:

INK → NQL

The parcel’s encrypted instruction is:

QHSR HKW HXOE ARE

Find the setting, then recover the instruction. The test and the parcel use exactly the same procedure and setting. There are no missing letters, extra reversals, or changes to the spaces.

You can make a paper alphabet wheel if useful. Its appearance is optional; an ordinary written alphabet contains everything the method needs.

Hint 1 - reveal when you want a nudge

Undo the final operation first. Reverse NQL before comparing it with INK.

Hint 2 - reveal when you want a nudge

NQL reversed is LQN. I becomes L, N becomes Q, and K becomes N: each move is three places forward.

Reveal the solution and explanation

The setting is 3, and the instruction is OPEN THE BLUE BOX.

The calibration resolves the setting rather than leaving it to the plausibility of the final sentence. Reversing NQL gives LQN. Comparing corresponding letters with INK gives a shift of three in every position. Of the allowed settings 1–9, only 3 maps I to L; the other two letters independently confirm it.

Now reverse each encrypted word: QHSR becomes RSHQ, HKW becomes WKH, HXOE becomes EOXH, and ARE becomes ERA. Move every letter three places backward. The four results are OPEN, THE, BLUE, and BOX.

Notice that the words themselves never exchange positions. Reversing the entire line would undo an operation the postmaster never performed.

For a check in the original direction, shift OPEN forward three places to RSHQ, then reverse it to QHSR. Repeating that check for all four words recreates the complete printed ciphertext. A fixed shift is a one-to-one letter mapping and word reversal is reversible, so the calibrated procedure permits only one plaintext, whether or not a solver recognizes the sentence early.

Solve another: The Cabinet of Fifty Mysteries · Browse all 50 cases